@oxyhq/services 26.0.1 → 26.0.3

package/lib/commonjs/ui/session/backgroundSession.js

@@ -0,0 +1,258 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.clearBackgroundSession = clearBackgroundSession;
+exports.isBackgroundSessionSupported = isBackgroundSessionSupported;
+exports.syncBackgroundSession = syncBackgroundSession;
+var _expoModulesCore = require("expo-modules-core");
+var _reactNative = require("react-native");
+var _core = require("@oxyhq/core");
+/**
+ * The JS half of the native background session credential.
+ *
+ * A home-screen widget or a sync job refreshes while the app process is dead:
+ * there is no JS runtime, so it cannot go through this SDK's normal session lane
+ * at all. Native code needs its own way to obtain a bearer, and this module is
+ * what gives it one — while the app runs, it provisions a purpose-built
+ * credential and hands it to the native store that `so.oxy.session.OxyBackgroundSession`
+ * reads.
+ *
+ * ## Why a separate credential rather than the device secret
+ *
+ * `POST /session/device/token` ROTATES the device secret on every mint, and the
+ * presented secret dies 60 seconds later. Native code minting with it would be a
+ * second writer to the value this SDK's whole session depends on — and since
+ * `createNativeAuthStateStore` serves JS from an in-process mirror that never
+ * re-reads storage, JS would be blind to that rotation. A worker killed between
+ * the server's rotation and its local write would sign the user out of the app.
+ * A credential that nobody rotates removes that failure mode instead of managing
+ * it.
+ *
+ * ## What this does NOT do
+ *
+ * It never reads or writes `oxy.auth.v1` / expo-secure-store. The two credentials
+ * live in different stores with one writer each, so there is nothing to keep in
+ * lockstep and no state that can disagree.
+ *
+ * ## Android only, and web is refused rather than merely unsupported
+ *
+ * Web is gated off by an explicit platform check, not by the native module being
+ * absent — provisioning in a browser origin would be a security downgrade, so it
+ * must not depend on an incidental fact. See {@link loadNativeModule}. iOS has no
+ * implementation yet and resolves to no module, so every function here degrades to
+ * a no-op: an app can enable this and lose nothing on other platforms.
+ */
+
+/**
+ * The native module's surface. Deliberately write-mostly: there is no `get`,
+ * because JS has no use for the secret it just wrote and keeping native as the
+ * secret's only reader is one less place it can leak from.
+ */
+
+/**
+ * Re-provision once the remaining lifetime drops below this.
+ *
+ * The server issues a 30-day credential; renewing with a week to spare means an
+ * app opened even occasionally always holds a live one, while an app left unopened
+ * for a month lets it lapse — which is the intended outcome, not a failure.
+ */
+const RENEW_WHEN_REMAINING_MS = 7 * 24 * 60 * 60 * 1000;
+let nativeModule;
+
+/**
+ * Resolve the native module once — and refuse outright on web.
+ *
+ * ## Web is excluded on purpose, and not merely because the module is absent
+ *
+ * The credential is deliberately NON-ROTATING and long-lived, which is safe only
+ * because native background code is its sole consumer and nobody rotates it. A
+ * browser origin already holds the ROTATING `deviceSecret`, and it has no
+ * background worker to serve — so provisioning there would add a strictly weaker
+ * long-lived secret alongside a stronger short-lived one. That is a downgrade, not
+ * a harmless no-op, and the harm lands at the PROVISION CALL (which mints a live
+ * server-side credential) regardless of whether anything manages to store it.
+ *
+ * That property must not rest on `requireOptionalNativeModule` happening to return
+ * `null` on web. It does today — the module is registered for android only — but
+ * that is an incidental fact a future web shim or a web-build native-module mock
+ * would quietly reverse. So the platform is checked FIRST, before we even ask the
+ * registry, and every entry point in this module inherits the gate.
+ *
+ * (A pre-deploy server makes this visible too: oxy-api's `sessionDevice` router
+ * applies `requireSameSiteOrigin` path-agnostically, so an unmatched path answers
+ * `404` to a native caller but `403 BAD_ORIGIN` to a browser one. Core's degrade is
+ * deliberately narrow — `404 → null` only — because a real origin misconfiguration
+ * on a CURRENT server also returns 403, and swallowing that would hide a genuine
+ * bug. Platform gating belongs here, where the platform is actually known.)
+ *
+ * `requireOptionalNativeModule` (a static import Metro always resolves) rather
+ * than a dynamic `import(moduleName)`: the latter compiles to `require(variable)`
+ * in the CJS build, which Metro cannot resolve inside a consuming app — it
+ * silently returned `null` there, which is exactly how the cross-app SSO bridge
+ * broke once. Same reasoning as `loadSharedIdentityBridge` in `@oxyhq/protocol`.
+ */
+function loadNativeModule() {
+  if (nativeModule === undefined) {
+    if (_reactNative.Platform.OS === 'web') {
+      nativeModule = null;
+      return nativeModule;
+    }
+    const native = (0, _expoModulesCore.requireOptionalNativeModule)('OxyBackgroundSession');
+    nativeModule = native && typeof native.put === 'function' && typeof native.clear === 'function' && typeof native.peek === 'function' ? {
+      put: native.put.bind(native),
+      clear: native.clear.bind(native),
+      peek: native.peek.bind(native)
+    } : null;
+  }
+  return nativeModule;
+}
+
+/** Whether this platform/app can hold a background credential at all. */
+function isBackgroundSessionSupported() {
+  return loadNativeModule() !== null;
+}
+
+/**
+ * Drop the stored credential. No-op where unsupported, and never throws.
+ *
+ * Called on sign-out and BEFORE an account switch's network work, so the window
+ * in which background code could still serve the previous account is as short as
+ * one local write.
+ */
+async function clearBackgroundSession() {
+  const native = loadNativeModule();
+  if (!native) {
+    return;
+  }
+  try {
+    await native.clear();
+  } catch (error) {
+    _core.logger.warn('[backgroundSession] could not clear the native background credential', {
+      component: 'backgroundSession',
+      error
+    });
+  }
+}
+/**
+ * Fail LOUDLY when the installed `@oxyhq/core` predates
+ * `provisionBackgroundCredential`.
+ *
+ * This is the one failure here that is a build/dependency mistake rather than a
+ * runtime condition, and it is the one that must never be quiet. Everything else
+ * in `syncBackgroundSession` is caught and logged at warn, which is right for a
+ * flaky network — but applying that to a version skew would leave background
+ * refreshes permanently non-functional behind a warning nobody reads. So this
+ * throws, and logs at ERROR first so it is still visible in a release build whose
+ * rejection handler is silent.
+ *
+ * Reachable only through a runtime skew: the declared `@oxyhq/core` range covers
+ * the method, so a correctly-resolved install cannot get here, and TypeScript
+ * rules it out at compile time.
+ */
+function assertProvisioningAvailable(oxyServices) {
+  if (typeof oxyServices.provisionBackgroundCredential === 'function') {
+    return;
+  }
+  const message = '[backgroundSession] the installed @oxyhq/core has no provisionBackgroundCredential, ' + 'so no background credential can be provisioned and native background refreshes will ' + 'never authenticate. Install a @oxyhq/core that satisfies this package\'s declared range.';
+  _core.logger.error(message, undefined, {
+    component: 'backgroundSession'
+  });
+  throw new Error(message);
+}
+
+/**
+ * Bring the native credential in line with the session JS currently holds.
+ *
+ * Ordering is the load-bearing part: a credential belonging to a DIFFERENT
+ * account is cleared before any network call, so a crash mid-provision leaves
+ * background code signed out rather than serving the previous account's data
+ * under the new account's name. The server enforces the same rule independently
+ * (a mint is re-authorized against the live device session, and against its ACTIVE
+ * account), so this is the fast local half of a belt-and-braces pair, not the only
+ * guard.
+ *
+ * Throws for exactly one thing — a `@oxyhq/core` too old to provision (see
+ * {@link assertProvisioningAvailable}). Every other failure is caught and logged:
+ * a background credential is an enhancement, and failing to provision one must
+ * not disturb the session that is working.
+ */
+async function syncBackgroundSession(input) {
+  const native = loadNativeModule();
+  if (!native) {
+    return;
+  }
+  const {
+    oxyServices,
+    userId,
+    canUsePrivateApi,
+    isCurrent
+  } = input;
+
+  // Before the try, so the catch below cannot turn a dependency skew into a
+  // warning. Signed-out is exempt: clearing needs no core method, and a sign-out
+  // must never be blocked by one.
+  if (userId) {
+    assertProvisioningAvailable(oxyServices);
+  }
+  try {
+    if (!userId) {
+      // Signed out. Local-only, so it works with no bearer and no network.
+      await native.clear();
+      return;
+    }
+    const stored = await native.peek();
+    if (stored && stored.accountId !== userId) {
+      // Identity changed under a live credential — clear FIRST, provision after.
+      await native.clear();
+    }
+    const isForCurrentAccount = stored?.accountId === userId;
+    const hasLifeLeft = isForCurrentAccount && stored.expiresAt - Date.now() > RENEW_WHEN_REMAINING_MS;
+    if (hasLifeLeft) {
+      return;
+    }
+
+    // Everything below needs a bearer. Without one yet (cold boot still
+    // resolving) there is nothing to do but wait for the next run — the token
+    // landing re-triggers this.
+    if (!canUsePrivateApi || !isCurrent()) {
+      return;
+    }
+    const provisioned = await oxyServices.provisionBackgroundCredential();
+    if (!provisioned) {
+      // `null` means the endpoint is not deployed yet. Expected during the
+      // rollout window (api leads the SDK) and deliberately quiet.
+      return;
+    }
+    if (!isCurrent()) {
+      return;
+    }
+    if (provisioned.accountId !== userId) {
+      // The active account moved while the request was in flight, so this
+      // credential is already for the wrong account. Drop it; the next run
+      // provisions for the account that is actually signed in.
+      await native.clear();
+      return;
+    }
+    const expiresAt = Date.parse(provisioned.expiresAt);
+    if (!Number.isFinite(expiresAt)) {
+      _core.logger.warn('[backgroundSession] server returned an unparseable credential expiry', {
+        component: 'backgroundSession'
+      });
+      return;
+    }
+    const persisted = await native.put(oxyServices.getBaseURL(), provisioned.deviceId, provisioned.secret, provisioned.accountId, expiresAt);
+    if (!persisted) {
+      _core.logger.warn('[backgroundSession] the native store did not retain the background credential; background refreshes stay signed out until the next attempt', {
+        component: 'backgroundSession'
+      });
+    }
+  } catch (error) {
+    _core.logger.warn('[backgroundSession] could not sync the native background credential', {
+      component: 'backgroundSession',
+      error
+    });
+  }
+}
+//# sourceMappingURL=backgroundSession.js.map

package/lib/commonjs/ui/session/backgroundSession.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_expoModulesCore","require","_reactNative","_core","RENEW_WHEN_REMAINING_MS","nativeModule","loadNativeModule","undefined","Platform","OS","native","requireOptionalNativeModule","put","clear","peek","bind","isBackgroundSessionSupported","clearBackgroundSession","error","logger","warn","component","assertProvisioningAvailable","oxyServices","provisionBackgroundCredential","message","Error","syncBackgroundSession","input","userId","canUsePrivateApi","isCurrent","stored","accountId","isForCurrentAccount","hasLifeLeft","expiresAt","Date","now","provisioned","parse","Number","isFinite","persisted","getBaseURL","deviceId","secret"],"sourceRoot":"../../../../src","sources":["ui/session/backgroundSession.ts"],"mappings":";;;;;;;;AAmCA,IAAAA,gBAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AAEA,IAAAE,KAAA,GAAAF,OAAA;AAtCA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA;AACA;AACA;AACA;AACA;;AA+BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMG,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;AAEvD,IAAIC,YAAiE;;AAErE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,gBAAgBA,CAAA,EAA4C;EACnE,IAAID,YAAY,KAAKE,SAAS,EAAE;IAC9B,IAAIC,qBAAQ,CAACC,EAAE,KAAK,KAAK,EAAE;MACzBJ,YAAY,GAAG,IAAI;MACnB,OAAOA,YAAY;IACrB;IACA,MAAMK,MAAM,GAAG,IAAAC,4CAA2B,EACxC,sBACF,CAAC;IACDN,YAAY,GACVK,MAAM,IACN,OAAOA,MAAM,CAACE,GAAG,KAAK,UAAU,IAChC,OAAOF,MAAM,CAACG,KAAK,KAAK,UAAU,IAClC,OAAOH,MAAM,CAACI,IAAI,KAAK,UAAU,GAC7B;MACEF,GAAG,EAAEF,MAAM,CAACE,GAAG,CAACG,IAAI,CAACL,MAAM,CAAC;MAC5BG,KAAK,EAAEH,MAAM,CAACG,KAAK,CAACE,IAAI,CAACL,MAAM,CAAC;MAChCI,IAAI,EAAEJ,MAAM,CAACI,IAAI,CAACC,IAAI,CAACL,MAAM;IAC/B,CAAC,GACD,IAAI;EACZ;EACA,OAAOL,YAAY;AACrB;;AAEA;AACO,SAASW,4BAA4BA,CAAA,EAAY;EACtD,OAAOV,gBAAgB,CAAC,CAAC,KAAK,IAAI;AACpC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeW,sBAAsBA,CAAA,EAAkB;EAC5D,MAAMP,MAAM,GAAGJ,gBAAgB,CAAC,CAAC;EACjC,IAAI,CAACI,MAAM,EAAE;IACX;EACF;EACA,IAAI;IACF,MAAMA,MAAM,CAACG,KAAK,CAAC,CAAC;EACtB,CAAC,CAAC,OAAOK,KAAK,EAAE;IACdC,YAAM,CAACC,IAAI,CAAC,sEAAsE,EAAE;MAClFC,SAAS,EAAE,mBAAmB;MAC9BH;IACF,CAAC,CAAC;EACJ;AACF;AAgBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASI,2BAA2BA,CAACC,WAAwB,EAAQ;EACnE,IAAI,OAAOA,WAAW,CAACC,6BAA6B,KAAK,UAAU,EAAE;IACnE;EACF;EACA,MAAMC,OAAO,GACX,sFAAsF,GACtF,sFAAsF,GACtF,0FAA0F;EAC5FN,YAAM,CAACD,KAAK,CAACO,OAAO,EAAElB,SAAS,EAAE;IAAEc,SAAS,EAAE;EAAoB,CAAC,CAAC;EACpE,MAAM,IAAIK,KAAK,CAACD,OAAO,CAAC;AAC1B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeE,qBAAqBA,CAACC,KAAiC,EAAiB;EAC5F,MAAMlB,MAAM,GAAGJ,gBAAgB,CAAC,CAAC;EACjC,IAAI,CAACI,MAAM,EAAE;IACX;EACF;EACA,MAAM;IAAEa,WAAW;IAAEM,MAAM;IAAEC,gBAAgB;IAAEC;EAAU,CAAC,GAAGH,KAAK;;EAElE;EACA;EACA;EACA,IAAIC,MAAM,EAAE;IACVP,2BAA2B,CAACC,WAAW,CAAC;EAC1C;EAEA,IAAI;IACF,IAAI,CAACM,MAAM,EAAE;MACX;MACA,MAAMnB,MAAM,CAACG,KAAK,CAAC,CAAC;MACpB;IACF;IAEA,MAAMmB,MAAM,GAAG,MAAMtB,MAAM,CAACI,IAAI,CAAC,CAAC;IAClC,IAAIkB,MAAM,IAAIA,MAAM,CAACC,SAAS,KAAKJ,MAAM,EAAE;MACzC;MACA,MAAMnB,MAAM,CAACG,KAAK,CAAC,CAAC;IACtB;IAEA,MAAMqB,mBAAmB,GAAGF,MAAM,EAAEC,SAAS,KAAKJ,MAAM;IACxD,MAAMM,WAAW,GACfD,mBAAmB,IAAIF,MAAM,CAACI,SAAS,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGlC,uBAAuB;IAChF,IAAI+B,WAAW,EAAE;MACf;IACF;;IAEA;IACA;IACA;IACA,IAAI,CAACL,gBAAgB,IAAI,CAACC,SAAS,CAAC,CAAC,EAAE;MACrC;IACF;IAEA,MAAMQ,WAAW,GAAG,MAAMhB,WAAW,CAACC,6BAA6B,CAAC,CAAC;IACrE,IAAI,CAACe,WAAW,EAAE;MAChB;MACA;MACA;IACF;IACA,IAAI,CAACR,SAAS,CAAC,CAAC,EAAE;MAChB;IACF;IACA,IAAIQ,WAAW,CAACN,SAAS,KAAKJ,MAAM,EAAE;MACpC;MACA;MACA;MACA,MAAMnB,MAAM,CAACG,KAAK,CAAC,CAAC;MACpB;IACF;IAEA,MAAMuB,SAAS,GAAGC,IAAI,CAACG,KAAK,CAACD,WAAW,CAACH,SAAS,CAAC;IACnD,IAAI,CAACK,MAAM,CAACC,QAAQ,CAACN,SAAS,CAAC,EAAE;MAC/BjB,YAAM,CAACC,IAAI,CAAC,sEAAsE,EAAE;QAClFC,SAAS,EAAE;MACb,CAAC,CAAC;MACF;IACF;IAEA,MAAMsB,SAAS,GAAG,MAAMjC,MAAM,CAACE,GAAG,CAChCW,WAAW,CAACqB,UAAU,CAAC,CAAC,EACxBL,WAAW,CAACM,QAAQ,EACpBN,WAAW,CAACO,MAAM,EAClBP,WAAW,CAACN,SAAS,EACrBG,SACF,CAAC;IACD,IAAI,CAACO,SAAS,EAAE;MACdxB,YAAM,CAACC,IAAI,CACT,4IAA4I,EAC5I;QAAEC,SAAS,EAAE;MAAoB,CACnC,CAAC;IACH;EACF,CAAC,CAAC,OAAOH,KAAK,EAAE;IACdC,YAAM,CAACC,IAAI,CAAC,qEAAqE,EAAE;MACjFC,SAAS,EAAE,mBAAmB;MAC9BH;IACF,CAAC,CAAC;EACJ;AACF","ignoreList":[]}

package/lib/commonjs/ui/session/index.js

@@ -63,9 +63,16 @@ Object.defineProperty(exports, "deviceStateToClientSessions", {
     return _core.deviceStateToClientSessions;
   }
 });
+Object.defineProperty(exports, "useBackgroundSessionSync", {
+  enumerable: true,
+  get: function () {
+    return _useBackgroundSessionSync.useBackgroundSessionSync;
+  }
+});
 var _createSessionClient = require("./createSessionClient.js");
 var _tokenTransport = require("./tokenTransport.js");
 var _authStore = require("./authStore.js");
+var _useBackgroundSessionSync = require("./useBackgroundSessionSync.js");
 var _identityBinding = require("./identityBinding.js");
 var _core = require("@oxyhq/core");
 //# sourceMappingURL=index.js.map

package/lib/commonjs/ui/session/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["_createSessionClient","require","_tokenTransport","_authStore","_identityBinding","_core"],"sourceRoot":"../../../../src","sources":["ui/session/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,IAAAA,oBAAA,GAAAC,OAAA;AACA,IAAAC,eAAA,GAAAD,OAAA;AACA,IAAAE,UAAA,GAAAF,OAAA;AACA,IAAAG,gBAAA,GAAAH,OAAA;AAEA,IAAAI,KAAA,GAAAJ,OAAA","ignoreList":[]}
+{"version":3,"names":["_createSessionClient","require","_tokenTransport","_authStore","_useBackgroundSessionSync","_identityBinding","_core"],"sourceRoot":"../../../../src","sources":["ui/session/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,IAAAA,oBAAA,GAAAC,OAAA;AACA,IAAAC,eAAA,GAAAD,OAAA;AACA,IAAAE,UAAA,GAAAF,OAAA;AACA,IAAAG,yBAAA,GAAAH,OAAA;AACA,IAAAI,gBAAA,GAAAJ,OAAA;AAEA,IAAAK,KAAA,GAAAL,OAAA","ignoreList":[]}

package/lib/commonjs/ui/session/useBackgroundSessionSync.js

@@ -0,0 +1,81 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.useBackgroundSessionSync = useBackgroundSessionSync;
+var _react = require("react");
+var _reactNative = require("react-native");
+var _backgroundSession = require("./backgroundSession.js");
+/**
+ * Keeps the native background credential in step with the session, so an app
+ * enables background authentication with one prop and writes no session code of
+ * its own.
+ *
+ * See `./backgroundSession` for what the credential is and why it is separate
+ * from the rotating device secret.
+ */
+
+/**
+ * An effect is the right shape here, unusually for this codebase: the work is a
+ * side effect on native storage, and it has to react both to an identity change
+ * (a value) and to the app being foregrounded (a subscription). There is no
+ * derived-state or React Query formulation of "write a credential to the
+ * keystore when the user changes or the app comes back".
+ *
+ * Re-runs on identity change, which is what makes sign-out and account switching
+ * work: `syncBackgroundSession` clears a credential belonging to anyone other
+ * than `userId` before it does any network work.
+ */
+function useBackgroundSessionSync({
+  enabled,
+  oxyServices,
+  userId,
+  canUsePrivateApi
+}) {
+  (0, _react.useEffect)(() => {
+    if (!(0, _backgroundSession.isBackgroundSessionSupported)()) {
+      return;
+    }
+    if (!enabled) {
+      // An app that leaves the feature off must not keep a credential THIS app
+      // provisioned earlier. The store is package-scoped (see
+      // OxyBackgroundSessionStore), so this cannot revoke a sibling Oxy app's
+      // credential under the shared UID.
+      void (0, _backgroundSession.clearBackgroundSession)();
+      return;
+    }
+
+    // A run that is superseded (unmount, or another identity change) must not
+    // write the credential it was about to write.
+    let current = true;
+    // Deliberately NOT caught. `syncBackgroundSession` already handles every
+    // runtime failure internally and throws for exactly one thing: an installed
+    // `@oxyhq/core` too old to provision. That is a dependency mistake which must
+    // surface, so it is allowed to reject — adding a `.catch()` here would put it
+    // back behind the silence it was moved out of.
+    const run = () => {
+      void (0, _backgroundSession.syncBackgroundSession)({
+        oxyServices,
+        userId,
+        canUsePrivateApi,
+        isCurrent: () => current
+      });
+    };
+    run();
+    const subscription = _reactNative.AppState.addEventListener('change', state => {
+      if (state === 'active') {
+        run();
+      }
+    });
+    return () => {
+      current = false;
+      subscription.remove();
+      // Deliberately NOT clearing here. Unmount is the app closing, which is
+      // precisely when the credential has to survive — clearing on teardown
+      // would defeat the entire feature. Revocation happens on sign-out (via a
+      // `userId` of null), on the server, or when the credential expires.
+    };
+  }, [enabled, oxyServices, userId, canUsePrivateApi]);
+}
+//# sourceMappingURL=useBackgroundSessionSync.js.map

package/lib/commonjs/ui/session/useBackgroundSessionSync.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_react","require","_reactNative","_backgroundSession","useBackgroundSessionSync","enabled","oxyServices","userId","canUsePrivateApi","useEffect","isBackgroundSessionSupported","clearBackgroundSession","current","run","syncBackgroundSession","isCurrent","subscription","AppState","addEventListener","state","remove"],"sourceRoot":"../../../../src","sources":["ui/session/useBackgroundSessionSync.ts"],"mappings":";;;;;;AAQA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AAEA,IAAAE,kBAAA,GAAAF,OAAA;AAXA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAoBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASG,wBAAwBA,CAAC;EACvCC,OAAO;EACPC,WAAW;EACXC,MAAM;EACNC;AAC6B,CAAC,EAAQ;EACtC,IAAAC,gBAAS,EAAC,MAAM;IACd,IAAI,CAAC,IAAAC,+CAA4B,EAAC,CAAC,EAAE;MACnC;IACF;IAEA,IAAI,CAACL,OAAO,EAAE;MACZ;MACA;MACA;MACA;MACA,KAAK,IAAAM,yCAAsB,EAAC,CAAC;MAC7B;IACF;;IAEA;IACA;IACA,IAAIC,OAAO,GAAG,IAAI;IAClB;IACA;IACA;IACA;IACA;IACA,MAAMC,GAAG,GAAGA,CAAA,KAAM;MAChB,KAAK,IAAAC,wCAAqB,EAAC;QACzBR,WAAW;QACXC,MAAM;QACNC,gBAAgB;QAChBO,SAAS,EAAEA,CAAA,KAAMH;MACnB,CAAC,CAAC;IACJ,CAAC;IAEDC,GAAG,CAAC,CAAC;IACL,MAAMG,YAAY,GAAGC,qBAAQ,CAACC,gBAAgB,CAAC,QAAQ,EAAGC,KAAK,IAAK;MAClE,IAAIA,KAAK,KAAK,QAAQ,EAAE;QACtBN,GAAG,CAAC,CAAC;MACP;IACF,CAAC,CAAC;IAEF,OAAO,MAAM;MACXD,OAAO,GAAG,KAAK;MACfI,YAAY,CAACI,MAAM,CAAC,CAAC;MACrB;MACA;MACA;MACA;IACF,CAAC;EACH,CAAC,EAAE,CAACf,OAAO,EAAEC,WAAW,EAAEC,MAAM,EAAEC,gBAAgB,CAAC,CAAC;AACtD","ignoreList":[]}

package/lib/commonjs/ui/utils/fileManagement.js

@@ -26,11 +26,11 @@ var _reactNative = require("react-native");
  * (carries a URI but is not a real DOM `File` / `Blob` instance).
  */
 function isRNFileDescriptor(input) {
-  if (!input || typeof input !== 'object') return false;
+  if (!input || typeof input !== "object") return false;
   const obj = input;
-  if (typeof obj.uri !== 'string') return false;
-  if (typeof File !== 'undefined' && input instanceof File) return false;
-  if (typeof Blob !== 'undefined' && input instanceof Blob) return false;
+  if (typeof obj.uri !== "string") return false;
+  if (typeof File !== "undefined" && input instanceof File) return false;
+  if (typeof Blob !== "undefined" && input instanceof Blob) return false;
   return true;
 }
 
@@ -38,9 +38,9 @@ function isRNFileDescriptor(input) {
  * Format file size in bytes to human-readable string
  */
 function formatFileSize(bytes) {
-  if (bytes === 0) return '0 Bytes';
+  if (bytes === 0) return "0 Bytes";
   const k = 1024;
-  const sizes = ['Bytes', 'KB', 'MB', 'GB'];
+  const sizes = ["Bytes", "KB", "MB", "GB"];
   const i = Math.floor(Math.log(bytes) / Math.log(k));
   return `${Number.parseFloat((bytes / k ** i).toFixed(2))} ${sizes[i]}`;
 }
@@ -49,14 +49,14 @@ function formatFileSize(bytes) {
  * Get icon name for file based on content type
  */
 function getFileIcon(contentType) {
-  if (contentType.startsWith('image/')) return 'image';
-  if (contentType.startsWith('video/')) return 'videocam';
-  if (contentType.startsWith('audio/')) return 'musical-notes';
-  if (contentType.includes('pdf')) return 'document-text';
-  if (contentType.includes('word') || contentType.includes('doc')) return 'document';
-  if (contentType.includes('excel') || contentType.includes('sheet')) return 'grid';
-  if (contentType.includes('zip') || contentType.includes('archive')) return 'archive';
-  return 'document-outline';
+  if (contentType.startsWith("image/")) return "image";
+  if (contentType.startsWith("video/")) return "videocam";
+  if (contentType.startsWith("audio/")) return "musical-notes";
+  if (contentType.includes("pdf")) return "document-text";
+  if (contentType.includes("word") || contentType.includes("doc")) return "document";
+  if (contentType.includes("excel") || contentType.includes("sheet")) return "grid";
+  if (contentType.includes("zip") || contentType.includes("archive")) return "archive";
+  return "document-outline";
 }
 
 /**
@@ -73,18 +73,18 @@ function getFileIcon(contentType) {
  */
 async function convertDocumentPickerAssetToFile(doc, index) {
   const fileName = doc.name || `file-${index + 1}`;
-  const fileType = doc.mimeType || 'application/octet-stream';
+  const fileType = doc.mimeType || "application/octet-stream";
 
   // React Native path — return the descriptor as-is. FormData handles it.
-  if (_reactNative.Platform.OS !== 'web') {
+  if (_reactNative.Platform.OS !== "web") {
     if (!doc.uri) {
-      throw new Error('Missing file data (no uri property)');
+      throw new Error("Missing file data (no uri property)");
     }
     return {
       uri: doc.uri,
       type: fileType,
       name: fileName,
-      size: typeof doc.size === 'number' ? doc.size : undefined
+      size: typeof doc.size === "number" ? doc.size : undefined
     };
   }
   try {
@@ -92,7 +92,7 @@ async function convertDocumentPickerAssetToFile(doc, index) {
 
     // Priority 1: Use doc.file if available (web native File API).
     // This is the most efficient path as it doesn't require fetching.
-    if (doc.file && typeof globalThis.File !== 'undefined' && doc.file instanceof globalThis.File) {
+    if (doc.file && typeof globalThis.File !== "undefined" && doc.file instanceof globalThis.File) {
       file = doc.file;
       // Ensure file has required properties
       if (!file.name && doc.name) {
@@ -116,22 +116,22 @@ async function convertDocumentPickerAssetToFile(doc, index) {
           throw new Error(`Failed to fetch file: ${response.statusText}`);
         }
         const blob = await response.blob();
-        const resolvedType = doc.mimeType || blob.type || 'application/octet-stream';
+        const resolvedType = doc.mimeType || blob.type || "application/octet-stream";
         file = new globalThis.File([blob], fileName, {
           type: resolvedType
         });
         file.uri = doc.uri;
         return file;
       } catch (error) {
-        console.error('Failed to read file from URI:', error);
-        throw new Error(`Failed to load file: ${(error instanceof Error ? error.message : null) || 'Unknown error'}`);
+        console.error("Failed to read file from URI:", error);
+        throw new Error(`Failed to load file: ${(error instanceof Error ? error.message : null) || "Unknown error"}`);
       }
     }
 
     // No file or URI available - this shouldn't happen with Expo 54
-    throw new Error('Missing file data (no file or uri property)');
+    throw new Error("Missing file data (no file or uri property)");
   } catch (error) {
-    console.error('Error converting document to file:', error);
+    console.error("Error converting document to file:", error);
     throw error;
   }
 }

package/lib/commonjs/ui/utils/fileManagement.js.map

@@ -1 +1 @@
-{"version":3,"names":["_reactNative","require","isRNFileDescriptor","input","obj","uri","File","Blob","formatFileSize","bytes","k","sizes","i","Math","floor","log","Number","parseFloat","toFixed","getFileIcon","contentType","startsWith","includes","convertDocumentPickerAssetToFile","doc","index","fileName","name","fileType","mimeType","Platform","OS","Error","type","size","undefined","file","globalThis","response","fetch","ok","statusText","blob","resolvedType","error","console","message","uploadFileRaw","userId","oxyServices","visibility","uploadRawFile"],"sourceRoot":"../../../../src","sources":["ui/utils/fileManagement.ts"],"mappings":";;;;;;;;;;AAGA,IAAAA,YAAA,GAAAC,OAAA;AAEA;AACA;AACA;AACA;AACA;;AAKA;AACA;AACA;AACA;AACA;;AASA;AACA;AACA;AACA;AACO,SAASC,kBAAkBA,CAACC,KAAc,EAA6B;EAC5E,IAAI,CAACA,KAAK,IAAI,OAAOA,KAAK,KAAK,QAAQ,EAAE,OAAO,KAAK;EACrD,MAAMC,GAAG,GAAGD,KAAgC;EAC5C,IAAI,OAAOC,GAAG,CAACC,GAAG,KAAK,QAAQ,EAAE,OAAO,KAAK;EAC7C,IAAI,OAAOC,IAAI,KAAK,WAAW,IAAIH,KAAK,YAAYG,IAAI,EAAE,OAAO,KAAK;EACtE,IAAI,OAAOC,IAAI,KAAK,WAAW,IAAIJ,KAAK,YAAYI,IAAI,EAAE,OAAO,KAAK;EACtE,OAAO,IAAI;AACb;;AAEA;AACA;AACA;AACO,SAASC,cAAcA,CAACC,KAAa,EAAU;EAClD,IAAIA,KAAK,KAAK,CAAC,EAAE,OAAO,SAAS;EACjC,MAAMC,CAAC,GAAG,IAAI;EACd,MAAMC,KAAK,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;EACzC,MAAMC,CAAC,GAAGC,IAAI,CAACC,KAAK,CAACD,IAAI,CAACE,GAAG,CAACN,KAAK,CAAC,GAAGI,IAAI,CAACE,GAAG,CAACL,CAAC,CAAC,CAAC;EACnD,OAAO,GAAGM,MAAM,CAACC,UAAU,CAAC,CAACR,KAAK,GAAGC,CAAC,IAAIE,CAAC,EAAEM,OAAO,CAAC,CAAC,CAAC,CAAC,IAAIP,KAAK,CAACC,CAAC,CAAC,EAAE;AAC1E;;AAEA;AACA;AACA;AACO,SAASO,WAAWA,CAACC,WAAmB,EAA2C;EACtF,IAAIA,WAAW,CAACC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,OAAO;EACpD,IAAID,WAAW,CAACC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,UAAU;EACvD,IAAID,WAAW,CAACC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,eAAe;EAC5D,IAAID,WAAW,CAACE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,eAAe;EACvD,IAAIF,WAAW,CAACE,QAAQ,CAAC,MAAM,CAAC,IAAIF,WAAW,CAACE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU;EAClF,IAAIF,WAAW,CAACE,QAAQ,CAAC,OAAO,CAAC,IAAIF,WAAW,CAACE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,MAAM;EACjF,IAAIF,WAAW,CAACE,QAAQ,CAAC,KAAK,CAAC,IAAIF,WAAW,CAACE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,SAAS;EACpF,OAAO,kBAAkB;AAC7B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeC,gCAAgCA,CAClDC,GAAgB,EAChBC,KAAa,EACiC;EAC9C,MAAMC,QAAQ,GAAGF,GAAG,CAACG,IAAI,IAAI,QAAQF,KAAK,GAAG,CAAC,EAAE;EAChD,MAAMG,QAAQ,GAAGJ,GAAG,CAACK,QAAQ,IAAI,0BAA0B;;EAE3D;EACA,IAAIC,qBAAQ,CAACC,EAAE,KAAK,KAAK,EAAE;IACvB,IAAI,CAACP,GAAG,CAACnB,GAAG,EAAE;MACV,MAAM,IAAI2B,KAAK,CAAC,qCAAqC,CAAC;IAC1D;IACA,OAAO;MACH3B,GAAG,EAAEmB,GAAG,CAACnB,GAAG;MACZ4B,IAAI,EAAEL,QAAQ;MACdD,IAAI,EAAED,QAAQ;MACdQ,IAAI,EAAE,OAAOV,GAAG,CAACU,IAAI,KAAK,QAAQ,GAAGV,GAAG,CAACU,IAAI,GAAGC;IACpD,CAAC;EACL;EAEA,IAAI;IACA,IAAIC,IAAwB,GAAG,IAAI;;IAEnC;IACA;IACA,IAAIZ,GAAG,CAACY,IAAI,IAAI,OAAOC,UAAU,CAAC/B,IAAI,KAAK,WAAW,IAAIkB,GAAG,CAACY,IAAI,YAAYC,UAAU,CAAC/B,IAAI,EAAE;MAC3F8B,IAAI,GAAGZ,GAAG,CAACY,IAAmB;MAC9B;MACA,IAAI,CAACA,IAAI,CAACT,IAAI,IAAIH,GAAG,CAACG,IAAI,EAAE;QACxB;QACAS,IAAI,GAAG,IAAIC,UAAU,CAAC/B,IAAI,CAAC,CAAC8B,IAAI,CAAC,EAAEZ,GAAG,CAACG,IAAI,EAAE;UAAEM,IAAI,EAAEG,IAAI,CAACH,IAAI,IAAIL;QAAS,CAAC,CAAC;MACjF;MACA;MACA,IAAIJ,GAAG,CAACnB,GAAG,EAAE;QACT+B,IAAI,CAAC/B,GAAG,GAAGmB,GAAG,CAACnB,GAAG;MACtB;MACA,OAAO+B,IAAI;IACf;;IAEA;IACA,IAAIZ,GAAG,CAACnB,GAAG,EAAE;MACT,IAAI;QACA,MAAMiC,QAAQ,GAAG,MAAMC,KAAK,CAACf,GAAG,CAACnB,GAAG,CAAC;QACrC,IAAI,CAACiC,QAAQ,CAACE,EAAE,EAAE;UACd,MAAM,IAAIR,KAAK,CAAC,yBAAyBM,QAAQ,CAACG,UAAU,EAAE,CAAC;QACnE;QACA,MAAMC,IAAI,GAAG,MAAMJ,QAAQ,CAACI,IAAI,CAAC,CAAC;QAClC,MAAMC,YAAY,GAAGnB,GAAG,CAACK,QAAQ,IAAIa,IAAI,CAACT,IAAI,IAAI,0BAA0B;QAC5EG,IAAI,GAAG,IAAIC,UAAU,CAAC/B,IAAI,CAAC,CAACoC,IAAI,CAAC,EAAEhB,QAAQ,EAAE;UAAEO,IAAI,EAAEU;QAAa,CAAC,CAAgB;QACnFP,IAAI,CAAC/B,GAAG,GAAGmB,GAAG,CAACnB,GAAG;QAClB,OAAO+B,IAAI;MACf,CAAC,CAAC,OAAOQ,KAAc,EAAE;QACrBC,OAAO,CAACD,KAAK,CAAC,+BAA+B,EAAEA,KAAK,CAAC;QACrD,MAAM,IAAIZ,KAAK,CAAC,wBAAwB,CAACY,KAAK,YAAYZ,KAAK,GAAGY,KAAK,CAACE,OAAO,GAAG,IAAI,KAAK,eAAe,EAAE,CAAC;MACjH;IACJ;;IAEA;IACA,MAAM,IAAId,KAAK,CAAC,6CAA6C,CAAC;EAClE,CAAC,CAAC,OAAOY,KAAc,EAAE;IACrBC,OAAO,CAACD,KAAK,CAAC,oCAAoC,EAAEA,KAAK,CAAC;IAC1D,MAAMA,KAAK;EACf;AACJ;;AAEA;AACA;AACA;AACO,eAAeG,aAAaA,CAC/BX,IAAsB,EACtBY,MAAc;AACd;AACAC,WAAgB,EAChBC,UAA8C,EAChD;EACE,OAAO,MAAMD,WAAW,CAACE,aAAa,CAACf,IAAI,EAAEc,UAAU,CAAC;AAC5D","ignoreList":[]}
+{"version":3,"names":["_reactNative","require","isRNFileDescriptor","input","obj","uri","File","Blob","formatFileSize","bytes","k","sizes","i","Math","floor","log","Number","parseFloat","toFixed","getFileIcon","contentType","startsWith","includes","convertDocumentPickerAssetToFile","doc","index","fileName","name","fileType","mimeType","Platform","OS","Error","type","size","undefined","file","globalThis","response","fetch","ok","statusText","blob","resolvedType","error","console","message","uploadFileRaw","userId","oxyServices","visibility","uploadRawFile"],"sourceRoot":"../../../../src","sources":["ui/utils/fileManagement.ts"],"mappings":";;;;;;;;;;AAGA,IAAAA,YAAA,GAAAC,OAAA;AAEA;AACA;AACA;AACA;AACA;;AAKA;AACA;AACA;AACA;AACA;;AASA;AACA;AACA;AACA;AACO,SAASC,kBAAkBA,CAACC,KAAc,EAA6B;EAC7E,IAAI,CAACA,KAAK,IAAI,OAAOA,KAAK,KAAK,QAAQ,EAAE,OAAO,KAAK;EACrD,MAAMC,GAAG,GAAGD,KAAgC;EAC5C,IAAI,OAAOC,GAAG,CAACC,GAAG,KAAK,QAAQ,EAAE,OAAO,KAAK;EAC7C,IAAI,OAAOC,IAAI,KAAK,WAAW,IAAIH,KAAK,YAAYG,IAAI,EAAE,OAAO,KAAK;EACtE,IAAI,OAAOC,IAAI,KAAK,WAAW,IAAIJ,KAAK,YAAYI,IAAI,EAAE,OAAO,KAAK;EACtE,OAAO,IAAI;AACZ;;AAEA;AACA;AACA;AACO,SAASC,cAAcA,CAACC,KAAa,EAAU;EACrD,IAAIA,KAAK,KAAK,CAAC,EAAE,OAAO,SAAS;EACjC,MAAMC,CAAC,GAAG,IAAI;EACd,MAAMC,KAAK,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;EACzC,MAAMC,CAAC,GAAGC,IAAI,CAACC,KAAK,CAACD,IAAI,CAACE,GAAG,CAACN,KAAK,CAAC,GAAGI,IAAI,CAACE,GAAG,CAACL,CAAC,CAAC,CAAC;EACnD,OAAO,GAAGM,MAAM,CAACC,UAAU,CAAC,CAACR,KAAK,GAAGC,CAAC,IAAIE,CAAC,EAAEM,OAAO,CAAC,CAAC,CAAC,CAAC,IAAIP,KAAK,CAACC,CAAC,CAAC,EAAE;AACvE;;AAEA;AACA;AACA;AACO,SAASO,WAAWA,CAC1BC,WAAmB,EACuB;EAC1C,IAAIA,WAAW,CAACC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,OAAO;EACpD,IAAID,WAAW,CAACC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,UAAU;EACvD,IAAID,WAAW,CAACC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,eAAe;EAC5D,IAAID,WAAW,CAACE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,eAAe;EACvD,IAAIF,WAAW,CAACE,QAAQ,CAAC,MAAM,CAAC,IAAIF,WAAW,CAACE,QAAQ,CAAC,KAAK,CAAC,EAC9D,OAAO,UAAU;EAClB,IAAIF,WAAW,CAACE,QAAQ,CAAC,OAAO,CAAC,IAAIF,WAAW,CAACE,QAAQ,CAAC,OAAO,CAAC,EACjE,OAAO,MAAM;EACd,IAAIF,WAAW,CAACE,QAAQ,CAAC,KAAK,CAAC,IAAIF,WAAW,CAACE,QAAQ,CAAC,SAAS,CAAC,EACjE,OAAO,SAAS;EACjB,OAAO,kBAAkB;AAC1B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeC,gCAAgCA,CACrDC,GAAgB,EAChBC,KAAa,EACoC;EACjD,MAAMC,QAAQ,GAAGF,GAAG,CAACG,IAAI,IAAI,QAAQF,KAAK,GAAG,CAAC,EAAE;EAChD,MAAMG,QAAQ,GAAGJ,GAAG,CAACK,QAAQ,IAAI,0BAA0B;;EAE3D;EACA,IAAIC,qBAAQ,CAACC,EAAE,KAAK,KAAK,EAAE;IAC1B,IAAI,CAACP,GAAG,CAACnB,GAAG,EAAE;MACb,MAAM,IAAI2B,KAAK,CAAC,qCAAqC,CAAC;IACvD;IACA,OAAO;MACN3B,GAAG,EAAEmB,GAAG,CAACnB,GAAG;MACZ4B,IAAI,EAAEL,QAAQ;MACdD,IAAI,EAAED,QAAQ;MACdQ,IAAI,EAAE,OAAOV,GAAG,CAACU,IAAI,KAAK,QAAQ,GAAGV,GAAG,CAACU,IAAI,GAAGC;IACjD,CAAC;EACF;EAEA,IAAI;IACH,IAAIC,IAAwB,GAAG,IAAI;;IAEnC;IACA;IACA,IACCZ,GAAG,CAACY,IAAI,IACR,OAAOC,UAAU,CAAC/B,IAAI,KAAK,WAAW,IACtCkB,GAAG,CAACY,IAAI,YAAYC,UAAU,CAAC/B,IAAI,EAClC;MACD8B,IAAI,GAAGZ,GAAG,CAACY,IAAmB;MAC9B;MACA,IAAI,CAACA,IAAI,CAACT,IAAI,IAAIH,GAAG,CAACG,IAAI,EAAE;QAC3B;QACAS,IAAI,GAAG,IAAIC,UAAU,CAAC/B,IAAI,CAAC,CAAC8B,IAAI,CAAC,EAAEZ,GAAG,CAACG,IAAI,EAAE;UAC5CM,IAAI,EAAEG,IAAI,CAACH,IAAI,IAAIL;QACpB,CAAC,CAAC;MACH;MACA;MACA,IAAIJ,GAAG,CAACnB,GAAG,EAAE;QACZ+B,IAAI,CAAC/B,GAAG,GAAGmB,GAAG,CAACnB,GAAG;MACnB;MACA,OAAO+B,IAAI;IACZ;;IAEA;IACA,IAAIZ,GAAG,CAACnB,GAAG,EAAE;MACZ,IAAI;QACH,MAAMiC,QAAQ,GAAG,MAAMC,KAAK,CAACf,GAAG,CAACnB,GAAG,CAAC;QACrC,IAAI,CAACiC,QAAQ,CAACE,EAAE,EAAE;UACjB,MAAM,IAAIR,KAAK,CAAC,yBAAyBM,QAAQ,CAACG,UAAU,EAAE,CAAC;QAChE;QACA,MAAMC,IAAI,GAAG,MAAMJ,QAAQ,CAACI,IAAI,CAAC,CAAC;QAClC,MAAMC,YAAY,GACjBnB,GAAG,CAACK,QAAQ,IAAIa,IAAI,CAACT,IAAI,IAAI,0BAA0B;QACxDG,IAAI,GAAG,IAAIC,UAAU,CAAC/B,IAAI,CAAC,CAACoC,IAAI,CAAC,EAAEhB,QAAQ,EAAE;UAC5CO,IAAI,EAAEU;QACP,CAAC,CAAgB;QACjBP,IAAI,CAAC/B,GAAG,GAAGmB,GAAG,CAACnB,GAAG;QAClB,OAAO+B,IAAI;MACZ,CAAC,CAAC,OAAOQ,KAAc,EAAE;QACxBC,OAAO,CAACD,KAAK,CAAC,+BAA+B,EAAEA,KAAK,CAAC;QACrD,MAAM,IAAIZ,KAAK,CACd,wBAAwB,CAACY,KAAK,YAAYZ,KAAK,GAAGY,KAAK,CAACE,OAAO,GAAG,IAAI,KAAK,eAAe,EAC3F,CAAC;MACF;IACD;;IAEA;IACA,MAAM,IAAId,KAAK,CAAC,6CAA6C,CAAC;EAC/D,CAAC,CAAC,OAAOY,KAAc,EAAE;IACxBC,OAAO,CAACD,KAAK,CAAC,oCAAoC,EAAEA,KAAK,CAAC;IAC1D,MAAMA,KAAK;EACZ;AACD;;AAEA;AACA;AACA;AACO,eAAeG,aAAaA,CAClCX,IAAsB,EACtBY,MAAc;AACd;AACAC,WAAgB,EAChBC,UAA8C,EAC7C;EACD,OAAO,MAAMD,WAAW,CAACE,aAAa,CAACf,IAAI,EAAEc,UAAU,CAAC;AACzD","ignoreList":[]}

package/lib/commonjs/ui/utils/netConnectivity.js

@@ -0,0 +1,28 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.isNetConnectivityExplicitlyOffline = isNetConnectivityExplicitlyOffline;
+exports.isNetConnectivityOnline = isNetConnectivityOnline;
+/**
+ * Mirrors Bloom `ConnectionStatusToasts` reachability semantics: a link that
+ * reports connected but explicitly unreachable (captive portal, no route) counts
+ * as offline.
+ */
+function isNetConnectivityOnline(state) {
+  return Boolean(state.isConnected && state.isInternetReachable !== false);
+}
+
+/**
+ * Conservative offline verdict for boot-path probes. Unknown / probing states
+ * (`null`, timed-out fetch) resolve to "not offline" so a flaky probe never
+ * skips a real sign-in.
+ */
+function isNetConnectivityExplicitlyOffline(state) {
+  if (!state) return false;
+  if (state.isConnected === false) return true;
+  if (state.isConnected === true && state.isInternetReachable === false) return true;
+  return false;
+}
+//# sourceMappingURL=netConnectivity.js.map

package/lib/commonjs/ui/utils/netConnectivity.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["isNetConnectivityOnline","state","Boolean","isConnected","isInternetReachable","isNetConnectivityExplicitlyOffline"],"sourceRoot":"../../../../src","sources":["ui/utils/netConnectivity.ts"],"mappings":";;;;;;;AAKA;AACA;AACA;AACA;AACA;AACO,SAASA,uBAAuBA,CAACC,KAAuB,EAAW;EACxE,OAAOC,OAAO,CAACD,KAAK,CAACE,WAAW,IAAIF,KAAK,CAACG,mBAAmB,KAAK,KAAK,CAAC;AAC1E;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASC,kCAAkCA,CAChDJ,KAA0C,EACjC;EACT,IAAI,CAACA,KAAK,EAAE,OAAO,KAAK;EACxB,IAAIA,KAAK,CAACE,WAAW,KAAK,KAAK,EAAE,OAAO,IAAI;EAC5C,IAAIF,KAAK,CAACE,WAAW,KAAK,IAAI,IAAIF,KAAK,CAACG,mBAAmB,KAAK,KAAK,EAAE,OAAO,IAAI;EAClF,OAAO,KAAK;AACd","ignoreList":[]}

package/lib/commonjs/ui/utils/oauthReturn.js

@@ -3,7 +3,6 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.consumeHubSyncFailure = consumeHubSyncFailure;
 exports.replaceUrlAfterOAuthReturn = replaceUrlAfterOAuthReturn;
 exports.tryCompleteOAuthReturn = tryCompleteOAuthReturn;
 var _core = require("@oxyhq/core");
@@ -13,12 +12,21 @@ var _isWebBrowser = require("./isWebBrowser.js");
  * When the RP lands with `?code=` after signing in at auth.oxy.so, exchange the
  * code for a device-first session before cold boot runs.
  *
- * This is the REDIRECT transport's return leg. It owns only what is specific to
- * a full-page round trip — reading the code off the URL, recovering the
- * handshake `sessionStorage` carried across the navigation, and cleaning both up
- * afterwards — and delegates state validation, the PKCE exchange, and the
- * session commit to `completeOAuthCode`, the same function the popup transport
- * runs.
+ * This is the REDIRECT transport's return leg. The SDK never starts a full-page
+ * authorize navigation on its own any more (#691 phase 7b), but this lane is
+ * still load-bearing: a browser-BLOCKED sign-in popup falls back to a full-page
+ * redirect (`startWebOAuthSignIn`), and that redirect comes back here.
+ *
+ * It owns only what is specific to a full-page round trip — reading the code off
+ * the URL, recovering the handshake `sessionStorage` carried across the
+ * navigation, and cleaning both up afterwards — and delegates state validation,
+ * the PKCE exchange, and the session commit to `completeOAuthCode`, the same
+ * function the popup transport runs.
+ *
+ * It is also the SINGLE cleanup path for an OAuth `error` landing on the URL:
+ * any `?error=…` (including an `error=login_required` left over from the
+ * now-deleted silent restore) is stripped along with `state` /
+ * `error_description`, and the stale PKCE handshake is cleared.
  */
 async function tryCompleteOAuthReturn(opts) {
   if (!(0, _isWebBrowser.isWebBrowser)()) return false;
@@ -42,13 +50,15 @@ async function tryCompleteOAuthReturn(opts) {
     (0, _core.clearOAuthHandshake)();
     return false;
   }
+  const handshake = (0, _core.readOAuthHandshake)();
+  const redirectUri = (0, _core.canonicalizeOAuthRedirectUri)(handshake?.redirectUri ?? opts.authRedirectUri ?? location.origin);
   const result = await (0, _completeOAuthCode.completeOAuthCode)({
     oxyServices: opts.oxyServices,
     clientId,
     code,
     returnedState: params.get('state'),
-    handshake: (0, _core.readOAuthHandshake)(),
-    redirectUri: (0, _core.normalizeOAuthRedirectUri)(opts.authRedirectUri ?? location.origin),
+    handshake,
+    redirectUri,
     commitSession: opts.commitSession,
     // Strip the params before the commit so a stale `?code=` cannot re-enter the
     // exchange loop, and read the return path FIRST — clearOAuthHandshake drops
@@ -111,27 +121,6 @@ function stripOAuthParamsFromUrl() {
   url.searchParams.delete('state');
   url.searchParams.delete('error');
   url.searchParams.delete('error_description');
-  url.searchParams.delete('hub_sync');
-  replaceUrlAfterOAuthReturn(`${url.pathname}${url.search}${url.hash}`);
-}
-
-/**
- * When auth.oxy.so hub-sync redeem fails, the IdP redirects back with
- * `?hub_sync=failed`. Strip the param and log so cold boot can continue
- * without leaving a stale query string.
- */
-function consumeHubSyncFailure() {
-  if (!(0, _isWebBrowser.isWebBrowser)()) return false;
-  const location = globalThis.location;
-  if (!location) return false;
-  const params = new URLSearchParams(location.search);
-  if (params.get('hub_sync') !== 'failed') return false;
-  _core.logger.warn('Hub sync failed — IdP device session may be out of sync', {
-    component: 'hubSync'
-  });
-  const url = new URL(location.href);
-  url.searchParams.delete('hub_sync');
   replaceUrlAfterOAuthReturn(`${url.pathname}${url.search}${url.hash}`);
-  return true;
 }
 //# sourceMappingURL=oauthReturn.js.map